Patch/Configuration Management

New research finds that six years later, AMD and Intel processors can still be hit with speculative execution attacks.

SafeBreach argues that Microsoft’s narrow definition of a flaw leaves the Windows kernel open to attacks.

Threat actors could exploit the vulnerability, which stems from resource exhaustion, to facilitate a denial-of-service condition in impacted devices' RAVPN service, said Cisco.

Such a flaw — which is a heap overflow in the platform's Distributed Computing Environment / Remote Procedure Call protocol — could be leveraged by threat actors with vCenter Server network access to facilitate code execution through a custom network packet.

Attackers targeted a government organization in a country part of the Commonwealth of Independent States with an email containing a concealed attached document and distinct tags within its body that facilitate arbitrary JavaScript execution.

The experimental SQL Expressions feature contains a flaw due to insufficient query sanitization.